General
- Target 2026-07-23_afe5229dd887913a9eb7268d3edba1ec_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.9MB
- Sample260723-ghfklaem5v
- SHA256 6fe6321a69922248c804593ac6a4bd208190c6baa614f1dcd0456d16831d4e38
- MD5 afe5229dd887913a9eb7268d3edba1ec
- SHA1 066f6624feaa617b17f32041d2f30e57ffac0ba9
- SHA512 d391864c61c7b06ad63ef572610593b4764b1d6161833856f888a67b7af16280598e831818928ab580c41f6981e0888e6eb784a2b137b81a515e72625a314e8a
- SSDEEP 49152:QYYo63Jp/A5whuuP8rypK6zs54Xaw+kv+8iM/EbAi3qPUNyk+VJKlK1Kc/++5EO:QDo+podwuAiwhH/nEO
- TLSH T1A0563A17FCA915E9C1AFD23589669552BB717C491F3123D32B60F2382F72BE0A9B9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-23_afe5229dd887913a9eb7268d3edba1ec_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_afe5229dd887913a9eb7268d3edba1ec_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.9MB
- SHA256 6fe6321a69922248c804593ac6a4bd208190c6baa614f1dcd0456d16831d4e38
- MD5 afe5229dd887913a9eb7268d3edba1ec
- SHA1 066f6624feaa617b17f32041d2f30e57ffac0ba9
- SHA512 d391864c61c7b06ad63ef572610593b4764b1d6161833856f888a67b7af16280598e831818928ab580c41f6981e0888e6eb784a2b137b81a515e72625a314e8a
- SSDEEP 49152:QYYo63Jp/A5whuuP8rypK6zs54Xaw+kv+8iM/EbAi3qPUNyk+VJKlK1Kc/++5EO:QDo+podwuAiwhH/nEO
- TLSH T1A0563A17FCA915E9C1AFD23589669552BB717C491F3123D32B60F2382F72BE0A9B9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-
Reads list of loaded kernel modules
Reads the list of currently loaded kernel modules, possibly to detect virtual environments.